This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer File: 8FAUfun2L5cEI8vYttUupfSg7aU.cer (raw, json) Hash identifier: DcC6N61pGRxoS0fThYNRX6knxErCgJxnND7njErm1L0= Subject key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F15848427E6807916B5E64C3D6E23C2 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 14:21:15 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 193.28.72.0/21 IP: 2001:67c:d50::/48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:84:27:e6:80:79:16:b5:e6:4c:3d:6e:23:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:0e:72:62:39:a4:3b:28:72:07:28:13:db: bf:66:5e:55:ea:97:b5:16:ad:ee:4a:c3:2d:40:ed: f3:48:14:d3:1c:33:48:4b:4a:1b:e8:41:3e:3e:72: 65:84:68:57:bc:bf:63:0f:3c:eb:d8:29:38:84:96: e5:b5:09:3e:d1:f8:89:58:60:c9:de:ea:80:61:ee: f1:90:af:43:d5:d1:f0:38:6d:0e:d1:d3:39:bb:b3: 0a:a6:79:6e:15:e8:fa:14:d0:af:c8:e6:d4:9c:78: 5f:09:d0:e3:2d:09:8e:b2:fd:53:3a:01:3c:ae:bc: f9:d6:22:cb:65:5a:04:fc:7d:a9:87:15:2b:fc:aa: 17:d0:fa:9b:5e:03:28:fb:d7:82:a3:bb:57:bc:05: 0a:2a:1f:19:06:b1:8a:7f:27:87:8f:25:bd:a6:c1: f6:52:da:79:7f:d0:57:9d:3f:79:88:1c:89:0a:48: a3:a2:a9:e8:ee:dc:b4:d2:b0:f8:96:41:44:11:3f: 63:a2:45:0d:06:e5:73:53:66:d7:66:34:65:7e:64: cb:88:ec:cd:57:37:8b:db:d0:d8:82:94:b2:b6:66: ca:51:99:89:40:06:83:b3:96:fc:91:f4:32:ff:60: db:8c:0e:ab:75:ea:09:e7:fe:66:9d:1a:af:35:e4: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.28.72.0/21 IPv6: 2001:67c:d50::/48 Signature Algorithm: sha256WithRSAEncryption 81:b0:5f:4a:1e:2a:d0:eb:f8:4c:6b:34:5d:16:9a:25:a7:9e: 54:d8:45:0e:ea:6a:92:17:87:fa:7c:37:c8:09:4a:91:79:5d: c4:47:7e:79:1a:ee:4f:a9:55:4a:0e:bc:62:62:21:31:62:7d: 48:99:bf:0a:df:3d:a7:4c:a2:62:af:45:db:12:0a:5a:b0:42: cc:00:8f:7f:29:79:fe:26:10:f3:23:59:12:05:9b:e8:a9:d1: 8f:68:ba:80:0c:13:5c:51:eb:62:8b:2d:64:4e:09:59:41:70: d8:f8:a7:a7:64:ba:a6:ca:4b:12:32:92:33:f2:bc:af:62:63: 65:86:d2:85:c7:f6:c2:f8:9c:2c:5b:88:06:b7:bd:1b:2a:2d: 7d:32:54:45:19:10:17:ac:29:48:d5:d6:5a:18:9f:27:98:9e: 7b:ab:7b:f6:c6:3f:42:bf:8c:dd:7c:c9:1e:5e:0f:82:e5:21: 4b:48:b9:a1:c4:17:c9:30:89:bf:31:88:d5:5e:bc:fe:16:28: d1:a4:e8:b1:9a:79:ee:27:3e:01:6b:60:aa:34:a6:5d:17:39: 3b:68:fe:9c:a5:6d:d0:68:d9:de:8a:b3:b1:9f:10:97:54:21: 64:39:c6:8c:5b:b1:2c:46:9e:74:4d:6c:4f:4b:51:d0:a7:37: 47:8f:4f:c6 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgISAZt/FYSEJ+aAeRa15kw9biPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDUwMTQ3ZWU5ZjYyZjk3MDQyM2NiZDhiNmQ1MmVhNWY0YTBlZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTEOcmI5pDsocgcoE9u/Zl5V6pe1 Fq3uSsMtQO3zSBTTHDNIS0ob6EE+PnJlhGhXvL9jDzzr2Ck4hJbltQk+0fiJWGDJ 3uqAYe7xkK9D1dHwOG0O0dM5u7MKpnluFej6FNCvyObUnHhfCdDjLQmOsv1TOgE8 rrz51iLLZVoE/H2phxUr/KoX0PqbXgMo+9eCo7tXvAUKKh8ZBrGKfyeHjyW9psH2 Utp5f9BXnT95iByJCkijoqno7ty00rD4lkFEET9jokUNBuVzU2bXZjRlfmTLiOzN VzeL29DYgpSytmbKUZmJQAaDs5b8kfQy/2DbjA6rdeoJ5/5mnRqvNeSeXQIDAQAB o4IClTCCApEwHQYDVR0OBBYEFPBQFH7p9i+XBCPL2LbVLqX0oO2lMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM5LzA3MjEw NS00OWVmLTQ5MDMtOTY5NS1lZWI4NjVkMTBkYmEvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzkvMDcyMTA1 LTQ5ZWYtNDkwMy05Njk1LWVlYjg2NWQxMGRiYS8xLzhGQVVmdW4yTDVjRUk4dll0 dFV1cGZTZzdhVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF BwEHAQH/BCEwHzAMBAIAATAGAwQDwRxIMA8EAgACMAkDBwAgAQZ8DVAwDQYJKoZI hvcNAQELBQADggEBAIGwX0oeKtDr+ExrNF0WmiWnnlTYRQ7qapIXh/p8N8gJSpF5 XcRHfnka7k+pVUoOvGJiITFifUiZvwrfPadMomKvRdsSClqwQswAj38pef4mEPMj WRIFm+ip0Y9ouoAME1xR62KLLWROCVlBcNj4p6dkuqbKSxIykjPyvK9iY2WG0oXH 9sL4nCxbiAa3vRsqLX0yVEUZEBesKUjV1loYnyeYnnure/bGP0K/jN18yR5eD4Ll IUtIuaHEF8kwib8xiNVevP4WKNGk6LGaee4nPgFrYKo0pl0XOTto/pylbdBo2d6K s7GfEJdUIWQ5xoxbsSxGnnRNbE9LUdCnN0ePT8Y= -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:15 2026 by rpki-client